Looking at the documentation https://developer.okta.com/docs/api/resources/users.html#change-password I get back a URL not the OTT itself. Do Okta provide an option to host your own page for the customer to add their new password?
Ideally I want to kick off a password reset journey via an API call. This should give me the OTT that I can email to the customer in a URL (containing the OTT) to my application. They can then enter the new password and my application will make an API call to Okta with the new password and OTT to make the change.